Human Resource Management System vulnerabilities | LiveThreat CVE Feed

Product

Human Resource Management System

by Oretnom23 · last CVE Jul 29, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities29 In the news0 Timeline

Severity mix

Critical 6High 6Medium 17Low 0

Severity

All severities29 Critical6 High6 Medium17 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Human Resource Management System to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-40682	9.8	0%	Jul 29	SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state”… Affected: 1.0
CVE-2024-35469	9.8	1%	May 30	A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter Affected: 1.0
CVE-2023-3391	9.8	1%	Jun 23	A vulnerability was found in SourceCodester Human Resource Management System 1.0 Affected: 1.0
CVE-2022-4273	9.8	1%	Dec 3	A vulnerability, which was classified as critical, has been found in SourceCodester Human Resource Management System 1.0 Affected: 1.0
CVE-2022-43262	9.8	1%	Nov 16	Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php Affected: 1.0
CVE-2022-3458	9.8	0%	Oct 12	SourceCodester Human Resource Management System Image File employeeview.php unrestricted upload Affected: 1.0
CVE-2024-34221	8.8	1%	May 14	Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation Affected: 1.0
CVE-2022-43318	8.8	1%	Nov 7	Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the stateedit parameter at /hrm/state.php Affected: 1.0
CVE-2022-3496	8.8	0%	Oct 14	SourceCodester Human Resource Management System Admin Panel employeeadd.php access control Affected: 1.0
CVE-2022-3492	8.8	1%	Oct 13	SourceCodester Human Resource Management System Profile Photo os command injection Affected: 1.0
CVE-2024-34220	7.5	1%	May 14	Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter Affected: 1.0
CVE-2022-4278	7.2	1%	Dec 3	A vulnerability was found in SourceCodester Human Resource Management System 1.0 Affected: 1.0
CVE-2022-3470	6.5	1%	Oct 12	SourceCodester Human Resource Management System getstatecity.php sql injection Affected: All versions, or not specified
CVE-2022-3473	6.5	1%	Oct 12	SourceCodester Human Resource Management System getstatecity.php sql injection Affected: All versions, or not specified
CVE-2025-40686	6.1	0%	Jul 29	Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0 Affected: 1.0
CVE-2025-40685	6.1	0%	Jul 29	Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0 Affected: 1.0
CVE-2025-40684	6.1	0%	Jul 29	Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0 Affected: 1.0
CVE-2025-40683	6.1	0%	Jul 29	Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0 Affected: 1.0
CVE-2022-4279	6.1	1%	Dec 3	A vulnerability classified as problematic has been found in SourceCodester Human Resource Management System 1.0 Affected: 1.0
CVE-2022-45218	6.1	0%	Nov 25	Human Resource Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability Affected: 1.0
CVE-2022-43317	6.1	1%	Nov 7	A cross-site scripting (XSS) vulnerability in /hrm/index.php?msg of Human Resource Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted… Affected: 1.0
CVE-2024-34222	5.9	0%	May 14	Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter Affected: 1.0
CVE-2024-35468	5.4	0%	May 30	A SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password… Affected: 1.0
CVE-2022-3497	5.4	0%	Oct 14	SourceCodester Human Resource Management System Master List cross site scripting Affected: 1.0
CVE-2022-3502	5.4	1%	Oct 14	Human Resource Management System Leave cross site scripting Affected: 1.0
CVE-2022-3493	5.4	0%	Oct 13	SourceCodester Human Resource Management System Add Employee cross site scripting Affected: 1.0
CVE-2022-3471	4.9	1%	Oct 12	SourceCodester Human Resource Management System city.php sql injection Affected: All versions, or not specified
CVE-2022-3472	4.9	1%	Oct 12	SourceCodester Human Resource Management System city.php sql injection Affected: All versions, or not specified
CVE-2024-34223	4.3	0%	May 14	Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave ticket Affected: 1.0